Skip to content
OpenAdvisories

Archive

6 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /6 January 2022 →
  1. 176
  2. 238
  3. 331
  4. 41
  5. 57
  6. 655
  7. 7135
  8. 8138
  9. 954
  10. 1033
  11. 112
  12. 123
  13. 13108
  14. 14116
  15. 15255
  16. 1644
  17. 1766
  18. 183
  19. 193
  20. 2073
  21. 2166
  22. 22117
  23. 2394
  24. 2417
  25. 2532
  26. 26244
  27. 2755
  28. 2828
  29. 2921
  30. 3050
  31. 3134
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-44685

    Command injection in git-it-electron

    Git-it through 4.4.0 allows OS command injection at the Branches Aren't Just For Birds challenge step. During the verification process, it attempts to run the reflog command followed by the current branch name (which is not sanitized for execution).

    git-it-electron npm
  • Critical 9.8
    CVE-2021-44684

    Command injection in github-todos

    naholyr github-todos 3.1.0 is vulnerable to command injection. The range argument for the _hook subcommand is concatenated without any validation, and is directly used by the exec function.

    github-todos npm
  • Critical 9.8
    CVE-2021-44677

    An issue (1 of 6) was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault applicat…

  • Critical 9.8
    CVE-2021-44678

    An issue (2 of 6) was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault applicat…

  • Critical 9.8
    CVE-2021-44679

    An issue (3 of 6) was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault applicat…

  • Critical 9.8
    CVE-2021-44680

    An issue (4 of 6) was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault applicat…

  • Critical 9.8
    CVE-2021-44681

    An issue (5 of 6) was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault applicat…

  • Critical 9.8
    CVE-2021-44682

    An issue (6 of 6) was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault applicat…

  • Critical 9.8
    CVE-2021-36567

    Deserialization of Untrusted Data in topthink/framework

    ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\AbstractCache.

    topthink/framework Packagist
  • Critical 9.8
    CVE-2021-36564

    Deserialization of Untrusted Data in topthink/framework

    ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\Adapter.php.

    topthink/framework Packagist
  • Critical 9.8
    CVE-2021-43931

    Distributed Data Systems WebHM

    The authentication algorithm of the WebHMI portal is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.

    Distributed Data Systems WebHMI
  • Critical 10.0
    CVE-2021-43936 Public exploit EPSS 36%

    Distributed Data Systems WebHM

    The software allows the attacker to upload or transfer files of dangerous types to the WebHMI portal, that may be automatically processed within the product's environment or lead to arbitrary code execution.

    Distributed Data Systems WebHMI